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The Listing of Claims will replace all prior versions and listings of claims in the 
present patent application: 

Listing of Claims 

1 . (Currently Amended) A decryption system comprising: 

a decryption unit for decrypting encrypted program signals using a program 
decryption key; 

a receiver for receiving signals including encrypted data defining the program 
decryption key; 

a security processor; and 

an interface providing a first path for transferring the encrypted data from the receiver to 
the security processor and providing a second path, separate and independent of the 
first path, for transferring data from the security processor to the decryption unit; 

and wherein the security processor is configured to decrypt the encrypted data 
using a program key so as to extract the program decryption key from the encrypted 
data, and to output the program decryption key for transfer through the second path of 
the interface to the decryption unit. 

2. (Original) A system as claimed in claim 1 , wherein the encrypted program signals 
include encrypted video signals and encrypted audio signals, the decryption unit 
comprises a video decryption unit for decrypting the encrypted video signals and an 
audio decryption unit for decrypting the encrypted audio signals, the encrypted data 
defines both a video working key and an audio working key, and the security processor 
is configured to extract both the video and the audio working keys from the encrypted 
data. 

3. (Original) A system as claimed in claim 1 , wherein the security processor is 
removable. 
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4. (Original) A system as claimed in claim 3, wherein the security processor 
comprises a smart card. 

5. (Original) A system as claimed in claim 3, wherein the security processor is 
configured for operation by a program downloaded from the receiver after the security 
processor is connected to the system. 

6. (Original) A system as claimed in claim 5, wherein the downloaded program 
comprises an applet and data representing the program key. 

7. (Original) A system as claimed in claim 6, wherein the data representing the 
program key is downloaded in encrypted form and, once downloaded, is decrypted by 
the applet. 

8. (Original) A system as claimed in claim 1 , wherein the signals received by the 
receiver include data identifying the auditorium in which the working decryption key is 
authorized to be used, the system further comprising a control processor responsive to 
the data for controlling the decryption unit. 

9. (Original) A system as claimed in claim 1 f wherein the signals received by the 
receiver include data identifying the time at which the working key is authorized to be 
used, the system further comprising a control processor responsive to the data for 
controlling the decryption unit. 

10. (Original) A system as claimed in claim 2, wherein the signals received by the 
receiver include data identifying a start frame in the video signals at which the working 
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key sha|[ begin to be used, the system further comprising a control processor 
responsive to the data for controlling the decryption unit. 

1 1 . (Original) A system as claimed in Claim 1 , wherein the security processor does 
not access the program decryption key in decrypted form. 

12. (Original) An apparatus for decrypting encrypted program signals, the apparatus 
comprising: 

receiving means for receiving encrypted key signals containing data defining a 
working decryption key; 

means for transferring the encrypted key signals via a first interface; 

first means, connected to the first interface, for decrypting the encrypted key 
signals, using a program key in a decryption algorithm, to determine the working 
decryption key; 

means for transferring the working decryption key via a second interface, 
different and operationally separate from the first interface; and 

second means, connected to the second interface, for decrypting the encrypted 
program signals using the working decryption key, 

and wherein the decryption algorithm is supplied together with the program 
decryption key via the receiving means and is downloaded therefrom to the first means 
for decrypting. 

13. (Original) An apparatus as claimed in claim 12, wherein the encrypted program 
signals include encrypted video signals and encrypted audio signals, the second means 
comprises video decrypting means for decrypting the encrypted video signals and audio 
decrypting means for decrypting the encrypted audio signals, the encrypted key signals 
define both a video working key and an audio working key, and the first means is 
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configured to extract both the video and the audio working keys from the encrypted key 
signals. 

14. (Original) An apparatus as claimed in claim 12, wherein the first means 
comprises a removable smart card. 

15. (Original) An apparatus as claimed in claim 14, wherein the smart card is 
configured for operation by a program downloaded from the receiver after the smart 
card is connected to the system. 

16. (Original) An apparatus as claimed in claim 15, wherein the downloaded program 
comprises an applet and data representing the program key. 

17. (Original) An apparatus as claimed in claim 12 f wherein the signals received by 
the receiving means include data identifying an auditorium in which the working 
decryption key is authorized to be used, the system further comprising controlling 
means responsive to the data for controlling the decryption unit. 

18. (Original) An apparatus as claimed in claim 12, wherein the signals received by 
the receiver include data identifying a time at which the working key is authorized to be 
used, the system further comprising controlling means responsive to the data for 
controlling the decryption unit. 

19. (Original) An apparatus as claimed in claim 13, wherein the signals received by 
the receiving means include data identifying a start frame in the video signals at which 
the working key shall begin to be used, the system further comprising controlling means 
responsive to the data for controlling the decryption unit. 
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20. (Original) An apparatus as claimed in claim 12, wherein the decrypted program 
signals cannot be accessed from the first interface. 

21. (Original) An apparatus in which, initially, a decryption algorithm received by a 
control processor is passed via a first interface path to a decryption processor where it 
is installed together with a program decryption key extracted therefrom, and, 
subsequently, encrypted working decryption keys received by the control processor are 
passed on to the decryption processor over the first interface path at which decryption 
processor they are decrypted using the program decryption key to obtain working 
decryption keys that are then transferred via a second interface path to decryptors for 
use in decrypting encrypted program signals input to the decryptors. 

22. (Original) A method for installing a decryption key, in which, initially, a decryption 
algorithm received by a control processor is passed via a first interface path to a 
decryption processor where it is installed together with a program decryption key 
extracted therefrom, and. subsequently, encrypted working decryption keys received by 
the control processor are passed on to the decryption processor over the first interface 
path at which decryption processor they are decrypted using the program decryption 
key to obtain working decryption keys that are then transferred via a second interface 
path to decryptors for use in decrypting encrypted program signals input to the 
decryptors. 

23. (Original) A method for installing a decryption key, the method comprising: 

receiving signals including encrypted data defining a working decryption key; 

transferring the encrypted data over a first path to a security processor; 

decrypting the encrypted data at the security processor using a program key so 
as to extract the working decryption key from the encrypted data; 
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outputting the working decryption key for transfer over a second path, separate and 
independent of the first path, to a decryption unit; and 

decrypting encrypted program signals in a decryption unit using the working decryption 
key. 

24. (Original) A method as claimed in claim 23, wherein the encrypted program 
signals include encrypted video signals and encrypted audio signals, and the encrypted 
data defines both a video working key and an audio working key, the method 
comprising the decryption unit comprises; 

decrypting the encrypted video signals in a video decryption unrt; 

decrypting the encrypted audio signals in an audio decryption unit; and 

extracting both the video and the audio working keys from the encrypted data. 

25. (Original) A method as claimed in claim 23, wherein the security processor is 
removable. 

26. (Original) A method as claimed in claim 25, wherein the security processor 
comprises a smart card. 

27. (Original) A method as claimed in claim 23, further comprising connecting the 
security processor to the system; and 

downloading a program to the processor. 

28. (Original) A method as claimed in claim 27, wherein the downloaded program 
comprises an applet and data representing the program key. 
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29. (Original) A method as claimed in claim 28, wherein the data representing the 
program key is downloaded in encrypted form and, once downloaded, is decrypted by 
the applet 

30. (Original) A method as claimed in claim 23, wherein the received signals include 
data identifying an auditorium in which the working decryption key is authorized to be 
used, the method further comprising controlling the decryption unit in response to the 
data. 

31 . (Original) A method as claimed in claim 23, wherein the received signals include 
data identifying the time at which the working key is authorized to be used, the method 
further comprising controlling the decryption unit in response to the data. 

32. (Original) A method as claimed in claim 24, wherein the received signals include 
data identifying a start frame in the video signals at which the working key shall begin to 
be used, the method further comprising controlling the decryption unit in response to the 
data. 

33. (Original) A method for decrypting encrypted program signals, the method 
comprising: 

receiving encrypted key signals containing data defining a working decryption 

key; 

transferring the encrypted key signals via a first interface; 

decrypting the encrypted key signals, using a program key in a decryption 
algorithm, to determine the working decryption key; 

transferring the working decryption key via a second interface, different and 
operationally separate from the first interface; and 
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decrypting the encrypted program signals using the working decryption key, 

and wherein the decryption algorithm is supplied together with the program 
decryption key through the receiving means and is downloaded therefrom to the first 
means for decrypting. 

34. (Original) A method as claimed in claim 33, wherein the encrypted program 
signals include encrypted video signals and encrypted audio signals, and the encrypted 
key signals define both a video working key and an audio working key, the method 
further comprising: 

extracting both the video and the audio working keys from the encrypted key signals 
decrypting the encrypted video signals; and 
decrypting the encrypted audio signals. 

35. (Original) A method as claimed in claim 33, wherein the decrypting of the 
encrypted key signals is done by a removable smart card. 

36. (Original) A method as claimed in claim 35, further comprising downloading to 
the smart card a program for the decrypting of the encrypted key signals. 

37. (Original) A method as claimed in claim 36, wherein the downloaded program 
comprises an applet and data representing the program key. 

38. (Original) A method as claimed in claim 33, wherein the signals received by the 
receiving means include data identifying an auditorium in which the working decryption 
key is authorized to be used, the method further comprising controlling the decryption 
unit in response to the data. 
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39. (Original) A method as claimed in claim 33, wherein the signals received by the 
receiver include data identifying a time at which the working key is authorized to be 
used, the method further comprising controlling the decryption unit in response to the 
data. 

40. (Original) A method as claimed in claim 34, wherein the signals received by the 
receiving means include data identifying a start frame in the video signals at which the 
working key shall begin to be used, the method further comprising controlling the 
decryption unit in response to the data. 

41 . (Original) A method as claimed in claim 31 , wherein the decrypted program 
signals cannot be accessed through the first interface. 
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